Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
File: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft (raw, json)
Hash identifier: avFCmHCKWTBmwnzOm+yb79DgUWUYMuwNRuZMdm8vTFI=
Subject key identifier: E8:78:37:EC:9E:A7:C4:CD:0C:26:22:9D:21:36:C3:ED:86:AD:32:CD
Authority key identifier: 67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
Certificate issuer: /CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Certificate serial: 019EBF91ADD6B3902D7E37134C7BE3A9890C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
Manifest number: EF
Signing time: Sat 13 Jun 2026 06:00:55 +0000
Manifest this update: Sat 13 Jun 2026 06:00:55 +0000
Manifest next update: Sun 14 Jun 2026 06:00:55 +0000
Files and hashes: 1: CuP-Ha4tOWBJT0pI4E4cOyq4rrs.roa (hash: PnhyGfN8Xq/cQidLwJYXET+Yc1KaRnRUtuvyvf2jYVs=)
2: Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl (hash: R+/1tFWKPv1I2iCrI2y8be9Z4pcweQFaeR3n3a/svDg=)
3: Z_qYOE4e2l4gEvD0IWAegIDMPig.asa (hash: eWA5Ad2XFQpR/DOWcwIfkGbSUhBVracuKwSeTKFgw50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:ad:d6:b3:90:2d:7e:37:13:4c:7b:e3:a9:89:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67ba979dd08dbe03c1748a022fa6654d3611940f
Validity
Not Before: Jun 13 06:00:55 2026 GMT
Not After : Jun 14 06:00:55 2026 GMT
Subject: CN=e87837ec9ea7c4cd0c26229d2136c3ed86ad32cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:db:d7:97:48:8f:63:d2:6f:08:22:a5:5f:c2:
de:68:0f:a9:a7:e1:49:ed:65:08:19:bf:53:6d:e1:
aa:da:d2:13:40:a9:4b:b3:ac:06:50:19:bf:7a:3f:
f8:aa:5d:0d:d9:88:e9:c1:19:96:44:95:18:c7:77:
91:4b:d3:e2:bf:51:ce:9f:bc:95:bf:4b:58:a3:58:
ee:b5:6b:d6:21:96:4f:29:f5:cd:ec:88:f3:d0:d7:
7a:26:bd:5c:73:9b:5c:02:8f:6a:8a:51:8c:73:37:
b6:9a:1c:18:38:42:21:48:d5:d2:d5:27:a2:d7:0e:
e0:8a:f2:9f:74:0e:07:cc:29:3d:2c:03:d9:cf:ec:
b6:7f:07:63:d7:73:57:bc:5b:4e:84:9f:3a:7d:da:
07:50:ce:87:98:5f:58:f4:4b:d1:10:fe:80:02:c4:
6a:f4:07:7a:fc:d0:af:54:07:3d:c3:09:1a:8b:96:
2e:c4:6e:d4:01:09:35:c3:af:6a:6c:2e:42:a2:88:
ba:5e:d5:18:99:98:ce:a2:6a:08:4e:7b:fb:db:df:
c3:72:84:72:ea:11:6b:0b:27:8a:c9:08:41:96:fb:
d3:d0:df:93:47:5a:91:ba:2b:3c:a6:a0:1d:59:67:
38:66:d7:c0:2e:30:2f:13:92:9e:f0:a5:f5:09:1d:
4f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:78:37:EC:9E:A7:C4:CD:0C:26:22:9D:21:36:C3:ED:86:AD:32:CD
X509v3 Authority Key Identifier:
keyid:67:BA:97:9D:D0:8D:BE:03:C1:74:8A:02:2F:A6:65:4D:36:11:94:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b30c04-eefa-4531-90d0-0144fd77ebe4/1/Z7qXndCNvgPBdIoCL6ZlTTYRlA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:59:ca:41:e3:6d:ee:68:df:03:fe:8e:89:4e:56:7a:24:6f:
36:b9:5e:5f:28:d7:be:cd:5d:f3:03:31:9d:21:9e:f6:11:44:
04:29:bc:86:35:00:39:23:07:20:4f:f7:3b:51:7b:0a:f7:6d:
da:9e:9b:5c:24:6d:36:07:d7:b6:47:96:00:56:16:db:e9:a7:
6d:05:e7:3d:f7:d1:a4:1b:00:25:6c:92:5a:b7:ad:3e:1a:ad:
bf:bb:62:cb:d4:c9:36:5e:b8:51:8a:13:1a:10:7d:a0:a8:42:
9b:e4:af:c8:00:56:28:01:e6:34:f5:d0:27:e9:7b:89:33:33:
14:5e:40:d4:32:b8:c2:57:04:ba:53:33:77:64:69:80:fd:a4:
d5:23:37:00:77:86:e9:96:ba:ed:b9:0f:9f:9c:b7:a4:66:97:
72:e7:b7:68:8d:90:cc:36:bf:3b:51:95:c5:74:5c:8b:eb:ce:
47:86:dc:03:a9:5d:a9:72:f0:4d:9d:2f:72:05:79:99:84:00:
98:a6:d2:16:aa:66:74:4b:df:b0:c1:8c:a4:a9:fc:8e:52:88:
a8:4f:38:15:0a:07:33:12:29:33:4e:da:2b:2d:24:7a:ca:7a:
de:60:83:10:75:48:26:63:d4:dd:48:4f:e7:be:08:9e:cf:ca:
cd:a9:e5:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:30:35 2026 by rpki-client